Newly disclosed vulnerabilities in SAP GUI for Windows and Java store user data with outdated or no encryption, posing ...

Swing has many useful classes that make graphical user interface (GUI) development easy. Some of these classes, however, are not well implemented. One example of such a class is ButtonGroup .

The vulnerabilities, tracked as CVE-2025-0055 and CVE-2025-0056, involved weak or absent encryption in the input history function of SAP GUI for Windows and SAP GUI for Java, exposing sensitive ...